Vulnerabilities

TI-2007-00124 CVE-2007-0129 · GHSA-98qr-vc4j-9g9v

SQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and earlier allows…

LOW 35

SQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and earlier allows remote attackers to execute arbitrary SQL commands via the subcatID parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01123 Published 2007-01-09 No fix listed

TI-2006-02766 CVE-2006-2858 · GHSA-qcvj-gc37-4c86

SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote…

LOW 36

SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary SQL commands via the msgid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01825 Published 2006-06-06 No fix listed

TI-2005-03950 CVE-2005-4205 · GHSA-6x2q-29mm-jmg2

Cross-site scripting (XSS) vulnerability in searchdb.asp in LocazoList 1.03c and earlier…

LOW 24

Cross-site scripting (XSS) vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01793 Published 2005-12-13 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and earlier allows…

SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote…

Cross-site scripting (XSS) vulnerability in searchdb.asp in LocazoList 1.03c and earlier…